CFCreatorFound Home

Legal · Last updated September 8, 2026

Privacy Policy

01

Recommendation discovery and click records

We use channel topics, descriptions and public upload metadata to find related videos from CreatorFound and public YouTube search. We use cached public comparison evidence for up to 48 hours before requiring fresh verification and remove expired cache entries during scheduled maintenance. For sponsored recommendations, we record the campaign, connected viewer channel identifier, account reference, time and credit charge to prevent duplicate billing and settle the purchased quota. Campaign owners receive aggregate delivery counts, not the identities of viewers. Click records form part of billing and fraud audit records under our retention controls. Extension research requests are not used to target these placements.

02

Optional brand discovery

Creators can opt into paid brand discovery from Profile and opt out later. An opted-in profile shares channel identity, description, public YouTube statistics, public uploads and creator-provided audience notes with brands that purchased the corresponding subscriber range. Login email addresses, OAuth credentials and private audience analytics are not displayed. CreatorFound staff review brand identity details and campaign briefs before opening in-app conversations. Existing conversations remain available after opting out.

03

Data we collect

Account identity, authorized YouTube channel and public video data, product activity, campaigns, proofs, messages, media-kit content, inquiries, billing references, support requests, security telemetry, fraud signals, and audit history.

04

YouTube data

We request the YouTube read-only scope. Tokens are encrypted, never displayed, and used to synchronize authorized channel metadata and public statistics. The core app cannot upload, edit, comment, subscribe, or publish. You can revoke Google access at any time.

05

How data is used

To operate the workspace, calculate transparent signals, match creators, settle credits and cash, process payments, prevent abuse, support users, comply with law, and improve the service. Private retention or revenue data is not inferred when it is unavailable.

06

Sharing

Data is shared with processors necessary for hosting, databases, payments, email, AI features you invoke, security, and support; with marketplace participants only as the product explains; and with authorities when legally required. We do not sell OAuth tokens or private messages.

07

Retention and control

You can edit profile and media-kit data, revoke YouTube, export account data, manage notification preferences, and request deletion. Operational, payment, fraud, dispute, and legal records use purpose-specific retention periods.

08

Security

Controls include encryption in transit and at rest, token encryption, signed cookies, idempotent payment processing, immutable ledgers, role-based staff access, audit trails, rate limits, and incident procedures. No security control eliminates every risk.